Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 68.654285][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 68.654297][ T27] audit: type=1800 audit(1560699313.480:33): pid=9322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 68.682356][ T27] audit: type=1800 audit(1560699313.480:34): pid=9322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 71.235129][ T27] audit: type=1400 audit(1560699316.060:35): avc: denied { map } for pid=9499 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.15' (ECDSA) to the list of known hosts. [ 454.037181][ T27] audit: type=1400 audit(1560699698.860:36): avc: denied { map } for pid=9511 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/06/16 15:41:39 parsed 1 programs [ 455.013886][ T27] audit: type=1400 audit(1560699699.840:37): avc: denied { map } for pid=9511 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=16195 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/06/16 15:41:42 executed programs: 0 [ 457.373015][ T9531] IPVS: ftp: loaded support on port[0] = 21 [ 457.431096][ T9535] IPVS: ftp: loaded support on port[0] = 21 [ 457.442003][ T9540] IPVS: ftp: loaded support on port[0] = 21 [ 457.445597][ T9536] IPVS: ftp: loaded support on port[0] = 21 [ 457.466243][ T9537] IPVS: ftp: loaded support on port[0] = 21 [ 457.530157][ T9541] IPVS: ftp: loaded support on port[0] = 21 [ 457.855083][ T9541] chnl_net:caif_netlink_parms(): no params data found [ 457.886871][ T9535] chnl_net:caif_netlink_parms(): no params data found [ 457.926406][ T9540] chnl_net:caif_netlink_parms(): no params data found [ 457.947065][ T9531] chnl_net:caif_netlink_parms(): no params data found [ 457.995355][ T9536] chnl_net:caif_netlink_parms(): no params data found [ 458.054755][ T9537] chnl_net:caif_netlink_parms(): no params data found [ 458.073253][ T9541] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.081576][ T9541] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.089221][ T9541] device bridge_slave_0 entered promiscuous mode [ 458.103377][ T9541] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.111188][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.119642][ T9541] device bridge_slave_1 entered promiscuous mode [ 458.133122][ T9535] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.140631][ T9535] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.148324][ T9535] device bridge_slave_0 entered promiscuous mode [ 458.181209][ T9531] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.188293][ T9531] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.196084][ T9531] device bridge_slave_0 entered promiscuous mode [ 458.209171][ T9531] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.216299][ T9531] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.224167][ T9531] device bridge_slave_1 entered promiscuous mode [ 458.231732][ T9535] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.238781][ T9535] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.246544][ T9535] device bridge_slave_1 entered promiscuous mode [ 458.284894][ T9540] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.292362][ T9540] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.303103][ T9540] device bridge_slave_0 entered promiscuous mode [ 458.316646][ T9540] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.323933][ T9540] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.332066][ T9540] device bridge_slave_1 entered promiscuous mode [ 458.354222][ T9541] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 458.371320][ T9541] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 458.399034][ T9535] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 458.416017][ T9535] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 458.424515][ T9536] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.431922][ T9536] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.439536][ T9536] device bridge_slave_0 entered promiscuous mode [ 458.448556][ T9531] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 458.465023][ T9531] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 458.486290][ T9540] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 458.499919][ T9536] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.506977][ T9536] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.516276][ T9536] device bridge_slave_1 entered promiscuous mode [ 458.525156][ T9541] team0: Port device team_slave_0 added [ 458.533092][ T9541] team0: Port device team_slave_1 added [ 458.543347][ T9537] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.550724][ T9537] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.558470][ T9537] device bridge_slave_0 entered promiscuous mode [ 458.567226][ T9540] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 458.608329][ T9537] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.615608][ T9537] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.623474][ T9537] device bridge_slave_1 entered promiscuous mode [ 458.631943][ T9535] team0: Port device team_slave_0 added [ 458.646292][ T9540] team0: Port device team_slave_0 added [ 458.659338][ T9540] team0: Port device team_slave_1 added [ 458.668056][ T9531] team0: Port device team_slave_0 added [ 458.681820][ T9535] team0: Port device team_slave_1 added [ 458.701656][ T9537] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 458.711836][ T9536] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 458.722402][ T9531] team0: Port device team_slave_1 added [ 458.729376][ T9536] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 458.791725][ T9541] device hsr_slave_0 entered promiscuous mode [ 458.840354][ T9541] device hsr_slave_1 entered promiscuous mode [ 458.908988][ T9537] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 459.043411][ T9540] device hsr_slave_0 entered promiscuous mode [ 459.101828][ T9540] device hsr_slave_1 entered promiscuous mode [ 459.171447][ T9537] team0: Port device team_slave_0 added [ 459.178819][ T9536] team0: Port device team_slave_0 added [ 459.232048][ T9535] device hsr_slave_0 entered promiscuous mode [ 459.280123][ T9535] device hsr_slave_1 entered promiscuous mode [ 459.391803][ T9531] device hsr_slave_0 entered promiscuous mode [ 459.440016][ T9531] device hsr_slave_1 entered promiscuous mode [ 459.481295][ T9537] team0: Port device team_slave_1 added [ 459.504845][ T9536] team0: Port device team_slave_1 added [ 459.571884][ T9536] device hsr_slave_0 entered promiscuous mode [ 459.622722][ T9536] device hsr_slave_1 entered promiscuous mode [ 459.765580][ T9537] device hsr_slave_0 entered promiscuous mode [ 459.829955][ T9537] device hsr_slave_1 entered promiscuous mode [ 460.013807][ T9541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.048235][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 460.057711][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 460.083450][ T9541] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.108556][ T9540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.168043][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 460.177422][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 460.186550][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.193686][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.202766][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 460.211433][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 460.219797][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.226869][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.234456][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 460.243320][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 460.252229][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 460.260788][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 460.269014][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 460.277668][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 460.286197][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 460.294151][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 460.302820][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 460.310951][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 460.341388][ T9540] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.358374][ T9541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 460.369079][ T9541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.391452][ T9536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.406427][ T9531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.423540][ T9535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.434647][ T9543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 460.443985][ T9543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 460.452789][ T9543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 460.461404][ T9543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 460.470559][ T9543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 460.511871][ T9531] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.524202][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 460.533951][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 460.542613][ T9542] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.549657][ T9542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.557583][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 460.566194][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 460.574909][ T9542] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.582013][ T9542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.589501][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 460.598114][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 460.605736][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 460.613471][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 460.621388][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 460.629497][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 460.640558][ T9536] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.681052][ T9541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.689436][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 460.698257][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 460.718502][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 460.727267][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 460.736353][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.743484][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.751378][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 460.759941][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 460.768258][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.775343][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.783033][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 460.791850][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 460.805452][ T9537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.816444][ T9535] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.831133][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 460.839158][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 460.848407][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 460.857733][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.864845][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.878461][ T27] audit: type=1400 audit(1560699705.700:38): avc: denied { associate } for pid=9541 comm="syz-executor.1" name="syz1" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 460.907930][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 460.916033][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 460.925450][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 460.935005][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 460.943853][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 460.952333][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 460.962461][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 460.989547][ T9540] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 461.006729][ T9540] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 461.022998][ T9537] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.030357][ T9555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 461.039073][ T9555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 461.049134][ T9555] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.056229][ T9555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.064361][ T9555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 461.073168][ T9555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 461.081720][ T9555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 461.090184][ T9555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 461.098477][ T9555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 461.106803][ T9555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 461.115174][ T9555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 461.167540][ T9540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.191257][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 461.199983][ T27] audit: type=1400 audit(1560699706.020:39): avc: denied { map_create } for pid=9562 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 461.226377][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 461.248900][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.256084][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.264682][ T27] audit: type=1400 audit(1560699706.020:40): avc: denied { map_read map_write } for pid=9562 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 461.285491][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 461.313610][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 461.322661][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.329716][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.346277][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 461.359097][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 461.368171][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 461.384245][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 461.399213][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 461.415716][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 461.426310][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.433397][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.447547][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 461.464371][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 461.472810][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.479888][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.488275][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 461.496245][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 461.504233][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 461.542336][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 461.573971][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 461.590941][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 461.601103][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 461.609639][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 461.618342][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 461.627088][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 461.635287][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 461.643820][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 461.652624][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 461.661730][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 461.670566][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 461.678600][ T9567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 461.706904][ T9536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 461.718829][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 461.734023][ T9554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 461.744866][ T9554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 461.753173][ T9554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 461.762896][ T9554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 461.772049][ T9554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 461.794210][ T9537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 461.804990][ T9537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 461.846813][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 461.863024][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 461.889681][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 461.898801][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 461.908960][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 461.922020][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 461.932347][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 461.941606][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 461.950651][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 461.959294][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 461.967950][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 461.979280][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 461.987732][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 461.998315][ T9543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 462.006610][ T9543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 462.016016][ T9543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 462.044130][ T9536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.071765][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 462.085963][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 462.095312][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 462.104272][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 462.144157][ T9537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.162839][ T9531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.182788][ T9535] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/06/16 15:41:47 executed programs: 14 [ 466.340353][T10011] ================================================================== [ 466.340360][T10011] BUG: KASAN: slab-out-of-bounds in class_equal+0x40/0x50 [ 466.340366][T10011] Read of size 8 at addr ffff888086c64570 by task syz-executor.0/10011 [ 466.340369][T10011] [ 466.340374][T10011] CPU: 1 PID: 10011 Comm: syz-executor.0 Not tainted 5.2.0-rc4+ #26 [ 466.340381][T10011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.340384][T10011] Call Trace: [ 466.340386][T10011] [ 466.340390][T10011] Allocated by task 9964: [ 466.340393][T10011] save_stack+0x23/0x90 [ 466.340397][T10011] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 466.340401][T10011] kasan_kmalloc+0x9/0x10 [ 466.340404][T10011] __kmalloc+0x15c/0x740 [ 466.340408][T10011] tomoyo_encode2.part.0+0xf5/0x400 [ 466.340411][T10011] tomoyo_encode+0x2b/0x50 [ 466.340415][T10011] tomoyo_realpath_from_path+0x1d3/0x7a0 [ 466.340418][T10011] tomoyo_path_perm+0x230/0x430 [ 466.340422][T10011] tomoyo_path_symlink+0xaa/0xf0 [ 466.340426][T10011] security_path_symlink+0x10a/0x170 [ 466.340430][T10011] do_symlinkat+0x137/0x290 [ 466.340433][T10011] __x64_sys_symlink+0x59/0x80 [ 466.340437][T10011] do_syscall_64+0xfd/0x680 [ 466.340442][T10011] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 466.340444][T10011] [ 466.340447][T10011] Freed by task 9964: [ 466.340450][T10011] save_stack+0x23/0x90 [ 466.340455][T10011] __kasan_slab_free+0x102/0x150 [ 466.340458][T10011] kasan_slab_free+0xe/0x10 [ 466.340462][T10011] kfree+0xcf/0x220 [ 466.340465][T10011] tomoyo_path_perm+0x24e/0x430 [ 466.340468][T10011] tomoyo_path_symlink+0xaa/0xf0 [ 466.340472][T10011] security_path_symlink+0x10a/0x170 [ 466.340476][T10011] do_symlinkat+0x137/0x290 [ 466.340480][T10011] __x64_sys_symlink+0x59/0x80 [ 466.340496][T10011] do_syscall_64+0xfd/0x680 [ 466.340500][T10011] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 466.340502][T10011] [ 466.340508][T10011] The buggy address belongs to the object at ffff888086c64500 [ 466.340513][T10011] which belongs to the cache kmalloc-96 of size 96 [ 466.340519][T10011] The buggy address is located 16 bytes to the right of [ 466.340524][T10011] 96-byte region [ffff888086c64500, ffff888086c64560) [ 466.340529][T10011] The buggy address belongs to the page: [ 466.340535][T10011] page:ffffea00021b1900 refcount:1 mapcount:0 mapping:ffff8880aa4004c0 index:0x0 [ 466.340543][T10011] flags: 0x1fffc0000000200(slab) [ 466.340549][T10011] raw: 01fffc0000000200 ffffea00027e2d08 ffffea000292e908 ffff8880aa4004c0 [ 466.340556][T10011] raw: 0000000000000000 ffff888086c64000 0000000100000020 0000000000000000 [ 466.340561][T10011] page dumped because: kasan: bad access detected [ 466.340563][T10011] [ 466.340567][T10011] Memory state around the buggy address: [ 466.340573][T10011] ffff888086c64400: 00 00 00 00 fb fb fb fb fb fb fb fb fc fc fc fc [ 466.340579][T10011] ffff888086c64480: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 466.340585][T10011] >ffff888086c64500: f1 f1 f1 f1 00 f2 f2 f2 00 f2 f2 f2 fc fc fc fc [ 466.340591][T10011] ^ [ 466.340598][T10011] ffff888086c64580: 00 00 00 f3 f3 f3 f3 f3 fb fb fb fb fc fc fc fc [ 466.340604][T10011] ffff888086c64600: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc 00 [ 466.340610][T10011] ================================================================== [ 466.340615][T10011] Disabling lock debugging due to kernel taint [ 466.340620][T10011] Kernel panic - not syncing: panic_on_warn set ... [ 466.341585][T10011] Kernel Offset: disabled